79d7733e0c728ccd774cccc058b52766 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79d7733e0c728ccd774cccc058b52766
Size

59KB
MD5

79d7733e0c728ccd774cccc058b52766
SHA1

fc3aca9e1b5834df4ddd4d14100f0877f5841226
SHA256

1ccf3eb920187505dc4b548baa4a9f99ecdd060ec0464ad1be380a0dfa6a7d25
SHA512

25563bb6d7f8247eb91012ef5017081ad3a99fd0b5ace3bd1c6831f653cba5edf9f281dfd843f7e9db37c4c44942b6d6d12f1c611b3e7a650df8022ff547d504
SSDEEP

768:uJOUD3r89rxav3S0K0LtB74ZtlhyQaDX6wjy11xp8A1nI3ZwgP:uJbD3r89rWRtwyDXH2Bp8DJwgP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79d7733e0c728ccd774cccc058b52766

Files

79d7733e0c728ccd774cccc058b52766
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE